Lucene search

[email protected]CVE-2004-0199

HistoryJun 14, 2004 - 4:00 a.m.

CVE-2004-0199

2004-06-1404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0199

microsoft

windows xp

windows server 2003

sp1

hcp urls

arbitrary code execution

nvd

7.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.961 High

EPSS

Percentile

99.5%

JSON

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).

CPENameOperatorVersion
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard

CPE	Name	Operator	Version
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard

References

marc.info/?l=bugtraq&m=108437759930820&w=2

marc.info/?l=full-disclosure&m=108430407801825&w=2

www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt

www.kb.cert.org/vuls/id/484814

www.securityfocus.com/bid/10321

docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-015

exchange.xforce.ibmcloud.com/vulnerabilities/16095

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1008

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1032

7.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.961 High

EPSS

Percentile

99.5%

JSON

Related for CVE-2004-0199

checkpoint_advisories2 nessus1 cert1 securityvulns1